Timeline
Jun 20, 2016:
- 3:57 PM Changeset in mod_gnutls [8a0da86]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Adjust log levels for OCSP cache updates
- 3:50 PM Changeset in mod_gnutls [9c456a9]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Clean up cache logging * Demote ordinary cache store/fetch operations …
- 3:23 PM Changeset in mod_gnutls [df49a2d]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Handbook: Sort options into subsections
- 2:51 PM Changeset in mod_gnutls [c3c96ca]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Handbook: Update and simplify description of GnuTLSPriorities The …
- 2:51 PM Changeset in mod_gnutls [fc124e9]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Handbook: Update configuration examples * Replaced old example …
- 2:51 PM Changeset in mod_gnutls [743e31f]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Documentation: Use "TLS" as the generic term instead of "SSL"
- 2:51 PM Changeset in mod_gnutls [e9ef72c]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Disable GnuTLSSessionTickets by default as described in handbook The …
- 2:50 PM Changeset in mod_gnutls [5a5032f]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Documentation for OCSP stapling options
Jun 18, 2016:
- 6:13 PM Changeset in mod_gnutls [4c529de]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Update Apache and GnuTLS version dependencies
- 5:30 PM Changeset in mod_gnutls [3725f2d]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Disable OCSP test for GnuTLS 3.5.0 Since 3.5.1 has been released, …
- 5:21 PM Changeset in mod_gnutls [f1147b6]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- OCSP post config: Ensure OCSP URI or response file are set If the …
- 3:18 PM Changeset in mod_gnutls [ef06c74]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Compatibility code for GCC version < 5 The builtin_add_overflow() …
- 2:58 PM Changeset in mod_gnutls [ac3f500]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Compatibility code for GnuTLS version < 3.4 * gnutls_memset() is not …
Jun 17, 2016:
- 7:13 AM Changeset in mod_gnutls [87d507b]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Overwrite session ticket key before releasing it Private key material …
Jun 16, 2016:
- 6:49 PM Changeset in mod_gnutls [78b75b3]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Restore GnuTLSOCSPResponseFile option Using an externally updated …
- 6:47 PM Changeset in mod_gnutls [a784735]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Test 27_OCSP_server: Check if gnutls-cli received a stapled OCSP response
- 6:47 PM Changeset in mod_gnutls [4d4a406]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- New config option: GnuTLSOCSPStapling This flag option …
- 3:37 PM Changeset in mod_gnutls [70d014b]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Remove FIXME comment about releasing config structures: Done!
- 2:32 PM Changeset in mod_gnutls [b8700b0]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Deinit proxy credentials on config pool cleanup
- 2:28 PM Changeset in mod_gnutls [02eabe7]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- TLS Proxy: Fix memory leak while logging certificate status The …
- 4:36 AM Changeset in mod_gnutls [f265001]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Bind temporary pool in load_proxy_x509_credentials() to ptemp scope …
Jun 15, 2016:
- 7:32 PM Changeset in mod_gnutls [7e7d328]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Deinit PGP certificate on config pool cleanup
- 7:27 PM Changeset in mod_gnutls [44e8944]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Allocate memory for X.509 and PGP certificates only when needed
- 6:12 PM Changeset in mod_gnutls [eee1432]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Bind temporary pool in mgs_load_files() to ptemp scope Pool 'spool' …
- 6:02 PM Changeset in mod_gnutls [45b7b83]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Deinit PGP private key and keyring on config pool cleanup
- 2:20 PM Changeset in mod_gnutls [db9ef68]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Deinit client CA list on config pool cleanup
- 1:32 PM Changeset in mod_gnutls [81433f1]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Reformat mgs_load_files() This commit changes only whitespace and …
- 1:32 PM Changeset in mod_gnutls [e2ba939]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Prevent memory leaks in post_conf hook Valgrind indicated memory …
Jun 14, 2016:
- 6:41 PM Changeset in mod_gnutls [317b569]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Make the response validity period of the test responder configurable
- 4:57 PM Changeset in mod_gnutls [894efd0]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Check OCSP response nonce
- 3:38 PM Changeset in mod_gnutls [82745d1]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Fix memory usage issues * Use-after-free of the OCSP request in …
- 2:40 PM Changeset in mod_gnutls [16ad0eb]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Perform OCSP request over HTTP Finally the whole stack is there! …
Jun 13, 2016:
- 1:32 AM Changeset in mod_gnutls [04addef]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Test suite: Always lock authority PGP keyring I've occasionally …
Jun 11, 2016:
- 7:03 PM Changeset in mod_gnutls [0831437]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Clarify the purpose of mgs_time2sz() I've renamed the CTIME macro to …
- 4:44 PM Changeset in mod_gnutls [47a909e]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Create OCSP requests when updating the cached response Actually …
- 8:20 AM Changeset in mod_gnutls [6c44ed2]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Test suite: Explicitly link gen_ocsp_index against libgnutls This is …
Jun 10, 2016:
- 8:26 PM Changeset in mod_gnutls [a372379]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Store server certificate fingerprint in OCSP config It's not like …
- 8:19 PM Changeset in mod_gnutls [cc74801e]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Move generated vhost-wide OCSP config into a private structure
- 8:06 PM Changeset in mod_gnutls [6b89353]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Remove Lua bytecode variables from directory config structure The …
- 7:39 PM Changeset in mod_gnutls [5559aa6]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Rely on cache for OCSP response expiration With fixed DBM cache …
- 7:30 PM Changeset in mod_gnutls [11e6205]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- dbm_cache_fetch(): Clear data size on allocation failure Memory …
- 3:14 PM Changeset in mod_gnutls [b2e6406]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Safe integer type conversion in mgs_filter_input() Read sizes should …
- 12:46 PM Changeset in mod_gnutls [15b22cb]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Allow compiling with clang Needs just a minimal workaround for an …
- 9:34 AM Changeset in mod_gnutls [d6834e0]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- OCSP refresh mutex: Prevent parallel requests Add a global mutex …
- 4:16 AM Changeset in mod_gnutls [aa68232]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Move global cache mutex into the private cache struct
Jun 9, 2016:
- 7:52 PM Changeset in mod_gnutls [e809fb30]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Use generic cache functions for OCSP response caching With this, OCSP …
- 7:09 PM Changeset in mod_gnutls [3e22b82]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Add generic store/fetch support to the memcached cache Required to …
- 5:08 PM Changeset in mod_gnutls [70a1e5a]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Introduce OCSP caching grace time A cached OCSP response must be …
- 2:50 PM Changeset in mod_gnutls [f450ac9]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Replace mgs_session_id2sz() with apr_(p?)escape_hex() There's no need …
- 12:33 PM Changeset in mod_gnutls [d18afb8]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Ensure that dbm_cache_fetch() does not return expired data The cache …
Jun 8, 2016:
- 5:58 PM Changeset in mod_gnutls [c6572ec]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Apply default cache timeout to OCSP responses without nextUpdate
- 5:24 PM Changeset in mod_gnutls [c55902b]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Trigger cache expiration on fetch, small restructuring In a situation …
- 3:31 PM Changeset in mod_gnutls [c005645]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Mutex for DBM cache access I noticed that with a DBM cache enabled …
- 11:58 AM Changeset in mod_gnutls [9c6ffe1]jessie-backportsdebian/0.7.5-2_bpo8+1 by
- rebuilding for jessie-backports
Jun 5, 2016:
- 3:42 PM Changeset in mod_gnutls [eb63377]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Check only expiration time for OCSP responses from cache Responses …
- 3:42 PM Changeset in mod_gnutls [366d1a1]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Use nextUpdate field of OCSP response to set cache lifetime
- 3:42 PM Changeset in mod_gnutls [08817d0]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Check OCSP response before caching Only verified responses should be …
- 3:42 PM Changeset in mod_gnutls [368e581]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Update OCSP response cache only if response is missing or invalid …
- 3:42 PM Changeset in mod_gnutls [4bf4ce2]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Use GCC builtins to catch overflows with mixed integer types …
- 3:42 PM Changeset in mod_gnutls [6b4136c]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Store OCSP responses in DBM cache before use This is not proper …
- 3:42 PM Changeset in mod_gnutls [2f932fa]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Use gnutls_datum_t to pass DBM keys for GnuTLS sessions The APR …
- 3:42 PM Changeset in mod_gnutls [6814e48]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Explain the different signatures of the dbm_cache functions
- 3:42 PM Changeset in mod_gnutls [15245bf]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Split dbm_cache_fetch() in generic and GnuTLS session specific parts …
- 3:42 PM Changeset in mod_gnutls [1d1361f]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Make dbm_cache_store() work outside connection context
- 3:42 PM Changeset in mod_gnutls [ae08186]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- DBM cache: Separate session caching and generic store operation
- 3:42 PM Changeset in mod_gnutls [f785704]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Make dbm_cache_expire() work outside connection context DBM cache …
Jun 3, 2016:
- 6:49 PM Changeset in mod_gnutls [04e6e65]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Move declarations of cache-related functions to a dedicated header …
- 3:33 PM Changeset in mod_gnutls [379a297]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Remove code used only with GnuTLS 2.x
- 3:09 PM Changeset in mod_gnutls [7511bfa]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Use ap_log_cerror() instead of ap_log_error() where reasonable …
- 3:01 PM Changeset in mod_gnutls [8913410]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Update copyright headers
- 2:31 PM Changeset in mod_gnutls [c3ad933]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Remove stale support code for Apache versions before 2.2
- 10:08 AM Changeset in mod_gnutls [fd6bb19]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Extract OCSP access URI from the server certificate
Jun 1, 2016:
- 1:01 PM Changeset in mod_gnutls [4ae7810]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Log port along with hostname if OCSP trust list initialization fails
- 12:41 PM Changeset in mod_gnutls [68ce93c]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Rearrange mgs_get_ocsp_response() for readability
- 12:20 PM Changeset in mod_gnutls [fad7695]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Store OCSP trust list in server config This avoids recreating the …
- 9:48 AM Changeset in mod_gnutls [baa4ed5]debian/masterdebian/stretch-backportsjessie-backportsdebian/0.7.5-2 by
- prepare release
- 9:47 AM Changeset in mod_gnutls [7d61199]debian/masterdebian/stretch-backportsjessie-backports by
- improve build-depends for nocheck scenario
- 9:46 AM Changeset in mod_gnutls [c9196cf]debian/masterdebian/stretch-backportsjessie-backports by
- wrap-and-sort
- 9:45 AM Changeset in mod_gnutls [6afa7b9]debian/masterdebian/stretch-backportsjessie-backports by
- ensure build-deps work where pandoc does not exist
May 31, 2016:
- 6:00 PM Changeset in mod_gnutls [64856fd]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Get rid of exit(-1) calls in mgs_hook_post_config() This allows the …
- 2:45 PM Changeset in mod_gnutls [c6c3357]pristine-tar by
- pristine-tar data for mod-gnutls_0.7.5.orig.tar.bz2
- 2:42 PM Changeset in mod_gnutls [2c81c36]debian/masterdebian/stretch-backportsjessie-backportsdebian/0.7.5-1 by
- prepare changelog for new release
- 2:42 PM Changeset in mod_gnutls [e12b9b6]debian/masterdebian/stretch-backportsjessie-backports by
- no need to adjust name of mod_gnutls.so after upstream fix
- 2:09 PM Changeset in mod_gnutls [96fc9d9]debian/masterdebian/stretch-backportsjessie-backports by
- drop patches applied upstream
- 2:09 PM Changeset in mod_gnutls [855b295]debian/masterdebian/stretch-backportsjessie-backports by
- Merge tag 'upstream/0.7.5' into debian Upstream version 0.7.5
- 2:09 PM Changeset in mod_gnutls [ce12806]debian/masterdebian/stretch-backportsjessie-backportsupstreamupstream/0.7.5 by
- Imported Upstream version 0.7.5
- 1:12 PM Changeset in mod_gnutls [2a1ffd6]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Move trust list generation for OCSP to a separate function The new …
May 30, 2016:
- 5:21 PM Changeset in mod_gnutls [d35b98e]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Check OCSP response and staple it only if good
- 4:18 PM Changeset in mod_gnutls [c05780e]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Proper runtests integration Test fails if runtests failed, avoid …
- 4:06 PM Changeset in mod_gnutls [4cc1edc]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Remove pointless <If> from test server config Apparently <If> is …
- 4:03 PM Changeset in mod_gnutls [20f8e99]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Provide full certificate chain to the server The server will need CA …
May 29, 2016:
- 6:06 PM Changeset in mod_gnutls [94cb972]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Minimal OCSP stapling implementation using externally provided …
- 3:38 PM Changeset in mod_gnutls [b674e95]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Merge version 0.7.5 into ocsp branch
May 28, 2016:
- 9:57 AM Ticket #136 (Infinite loop while cleaning up GnuTLS session) closed by
- fixed: This is now fixed in 0.7.5.
- 8:05 AM Changeset in mod_gnutls [086cea9]asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstreammod_gnutls/0.7.5 by
- Release version 0.7.5
May 27, 2016:
- 8:33 PM Changeset in mod_gnutls [2b80754]asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream by
- Delete target files before exporting PGP certificates GnuPG promts or …
- 8:12 PM Changeset in mod_gnutls [9e56602]asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream by
- Check for write errors in pgpcrc.c to get rid of build warning
- 8:12 PM Changeset in mod_gnutls [42829ae]asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream by
- Build pgpcrc through Automake, clean new GnuPG privkey files & directories
- 8:12 PM Changeset in mod_gnutls [298dc66]asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream by
- use --outfile instead of stdio redirection This way, when a command …
- 8:12 PM Changeset in mod_gnutls [d70dd6e]asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream by
- ensure cleanup of gpg v2.1 keyrings as well depending on the version …
- 4:07 PM Changeset in mod_gnutls [0bda20f]asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream by
- Make "make distcheck" work This requires strict DIST/DISTCLEAN lists …
- 2:56 PM Changeset in mod_gnutls [eb34ac4]asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream by
- Let Automake handle module installation Using a custom pkglib …
- 1:03 PM Changeset in mod_gnutls [eda8686]asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream by
- Disable building static libraries Only the dynamic library is used by …
- 12:26 PM Changeset in mod_gnutls [19f2719]asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream by
- Update comments and formating in push/pull functions
- 12:11 PM Changeset in mod_gnutls [a9fa300]asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream by
- Set GnuTLS session errno on all error paths in mgs_transport_read()
May 26, 2016:
- 6:00 PM Changeset in mod_gnutls [6868585]asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream by
- Remove unnecessary session pointer check The transport functions are …
- 5:09 PM Changeset in mod_gnutls [be41ee4]asynciodebian/masterdebian/stretch-backportsjessie-backportsproxy-ticketupstream by
- Set GnuTLS session errno on errors in mgs_transport_write() Sunil …
May 23, 2016:
- 5:08 PM Changeset in mod_gnutls [efe884e]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Skip OCSP test with incompatible GnuTLS versions Please see the …
- 5:08 PM Changeset in mod_gnutls [c4d6e77]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Test suite: New test case for simple HTTPS access with OCSP status check
- 2:02 AM Changeset in mod_gnutls [9e309ae]asynciodebian/masterdebian/stretch-backportsproxy-ticketupstream by
- Merge version 0.7.4 into ocsp
May 21, 2016:
- 8:16 AM Ticket #136 (Infinite loop while cleaning up GnuTLS session) created by
- I noticed that some apache2 processes take 100% CPU after a few …
Note: See TracTimeline
for information about the timeline view.